No secure web login (https)?

Discussion in 'General Requests' started by diyguy, Jan 3, 2017.

  1. diyguy

    diyguy Member For 1 Year

    Blog Posts:
    0
    Joined:
    Aug 15, 2015
    Messages:
    36
    I would like to see https (SSL) implemented on the standard login page, so the user password is sent in encrypted form, rather than in clear text.

    It seems odd that this isn't available. Am I missing something?

    BTW, I don't want to use Facebook or Google to log in.

    Thanks.
     
    stmtpr likes this.
  2. SMOKIE

    SMOKIE THE MODFATHER Staff Member VU Senior Leadership VU Senior Administrator Senior Moderator VU Donator Gold Contributor Member For 3 Years VU Live Leadership VU Live Host Show Host Reviewer Vape Media

    Blog Posts:
    1
    Joined:
    May 1, 2014
    Messages:
    4,158
    We do not sell anything here to need a SSL. When you go to a vendors site from here that is different, and most have a SSL
     
    snake94115 likes this.
  3. SMOKIE

    SMOKIE THE MODFATHER Staff Member VU Senior Leadership VU Senior Administrator Senior Moderator VU Donator Gold Contributor Member For 3 Years VU Live Leadership VU Live Host Show Host Reviewer Vape Media

    Blog Posts:
    1
    Joined:
    May 1, 2014
    Messages:
    4,158
    And if that paranoid just use a VPN
     
    snake94115, Whiskey and Angrygod50 like this.
  4. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    Smokie -- It's not just about the selling that you "should" use SSL. Some users authenticate with a username / password. These are being sent in clear-text to the web server when not use SSL.
     
    r055co, diyguy and stmtpr like this.
  5. MrScaryZ

    MrScaryZ VU Donator Platinum Contributor Member For 2 Years

    Blog Posts:
    0
    Joined:
    Jun 25, 2014
    Messages:
    6,932
    Are you worried that someone will run a man in the middle attack and steal your "Vape Identity" and say something outrageous?
     
    snake94115 and CrazyChef like this.
  6. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    I personally am not, however some users tend to use the SAME password on every single site. SOME users don't realize they should have a different password for every single site.

    I'm not one of THOSE users. I've been in the IT / security industry for 20+ years and know what to / not to do things.
     
    r055co, burley, diyguy and 2 others like this.
  7. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    I've sent SMOKIE a direct PM if he chooses to discuss further about this. I will offer any support / assistance I can if VU chooses to enable SSL.
     
  8. MrScaryZ

    MrScaryZ VU Donator Platinum Contributor Member For 2 Years

    Blog Posts:
    0
    Joined:
    Jun 25, 2014
    Messages:
    6,932
    Ahhh well so have I and you also know that if people are too stupid or Lazy to manage their passwords while running around the world on the INTERNET they probably should not be on at all. :)
     
    snake94115 and PhantomOp like this.
  9. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    @diyguy @SMOKIE @Whiskey
    As I suspected, VU is behind CloudFlare. So technically, we do have a free SSL available to us.
    However, the web server is not properly configured.

    upload_2017-1-4_18-6-25.png
     
  10. Whiskey

    Whiskey Diamond Contributor Member For 2 Years

    Blog Posts:
    0
    Joined:
    Jul 13, 2014
    Messages:
    49,148
    Admin in charge of all that, you sent Smokie a pm, see how that turns out:)
     
    snake94115 likes this.
  11. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    Not a problem with me. :)
     
    Whiskey likes this.
  12. MrScaryZ

    MrScaryZ VU Donator Platinum Contributor Member For 2 Years

    Blog Posts:
    0
    Joined:
    Jun 25, 2014
    Messages:
    6,932
    You are not one of the guys that wants to firewall your local server then run a firewall in front of it then a firewall to firewall the firewall I hope :)
     
  13. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    LOL! no
     
  14. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    I'm the kind of guy that thinks you should have two firewalls (load balanced) in front of the firewall'd web server, then another set of firewalls in front of those (load balanced) ... and then another set in another data center --- why ??? just because I can.






    J/K :D
     
    MrScaryZ likes this.
  15. MrScaryZ

    MrScaryZ VU Donator Platinum Contributor Member For 2 Years

    Blog Posts:
    0
    Joined:
    Jun 25, 2014
    Messages:
    6,932
    haha Im just messing with you :)
     
  16. PhantomOp

    PhantomOp VU Donator Gold Contributor

    Blog Posts:
    0
    Joined:
    Nov 5, 2016
    Messages:
    1,818
    I know :D

    Or it was one of the typical "techie" to "techie" ... let see if he really knows his shit. :shades:
     
    MrScaryZ likes this.
  17. snake94115

    snake94115 Platinum Contributor Member For 1 Year

    Blog Posts:
    0
    Joined:
    Nov 5, 2015
    Messages:
    5,945

Share This Page

Close This Message